fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
161 stars 162 forks source link

Allow init_t nnp domain transition to colord_t #2006

Closed zpytela closed 7 months ago

zpytela commented 7 months ago

The permission is required in colord v1.4.7 which contains miscellaneous service sandboxing features.

The commit addresses the following AVC denial: Jan 22 09:23:44 fedora audit[1159]: AVC avc: denied { nnp_transition } for pid=1159 comm="(colord)" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:colord_t:s0 tclass=process2 permissive=0 Jan 22 09:23:44 fedora audit: SELINUX_ERR op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:init_t:s0 newcontext=system_u:system_r:colord_t:s0

Resolves: rhbz#2259679